test bearer authentication using postman